The unofficial HackerOne disclosure Timeline

Stripo Inc disclosed a bug submitted by vijith0x0x
Email verification bypasa

24 Mar 2020 timeline

Fortmatic Inc. disclosed a bug submitted by pwny_sec
HTTP SMUGGLING EXPOSED HMAC/DOS

24 Mar 2020 timeline

Every.org disclosed a bug submitted by ahmd_halabi
Flaw in Change Email https://youtu.be/MMvlcHIGs2A

24 Mar 2020 timeline

Qulture.Rocks disclosed a bug submitted by ravi2443
Unrestricted File Upload in Chat Window

23 Mar 2020 timeline

NordVPN disclosed a bug submitted by khizer47
Expired Available Domains in nordvpn.com website code

23 Mar 2020 timeline

Every.org disclosed a bug submitted by harshitshah4
Improper email address verifiation while saving Account Details

23 Mar 2020 timeline

Valve disclosed a bug submitted by xpaw
Hidden scheduled partner events are propagated to Steam clients in CMsgClientClanState

20 Mar 2020 timeline

HackerOne disclosed a bug submitted by yashrs
Race Condition leads to undeletable group member

20 Mar 2020 timeline

HackerOne disclosed a bug submitted by jobert
Unauthenticated users can obtain information about Checklist objects with unclaimed ChecklistCheck objects

20 Mar 2020 timeline

PicsArt disclosed a bug submitted by donhasan
User account compromised authentication bypass via oauth token impersonation

20 Mar 2020 timeline

Myndr disclosed a bug submitted by thilakesh
Reflected XSS in https://blocked.myndr.net

19 Mar 2020 timeline

MariaDB disclosed a bug submitted by badis
scripts loader (denial of service) vulnerability

19 Mar 2020 timeline

OLX disclosed a bug submitted by badis
load scripts DOS vulnerability

19 Mar 2020 timeline

Reverb.com disclosed a bug submitted by sandeep_hodkasia
Full account takeover

19 Mar 2020 timeline

Razer disclosed a bug submitted by zelzal
Misconfigured Bucket [razer-assets2] https://assets2.razerzone.com/

18 Mar 2020 timeline

Razer disclosed a bug submitted by nnez
Reflected XSS on https://www.easytopup.in.th/store/product/return on parameter mref_id

18 Mar 2020 timeline

Razer disclosed a bug submitted by marzuki1337
AWS subdomain Takeover at estore.razersynapse.com

18 Mar 2020 timeline

Starbucks disclosed a bug submitted by bytebunny
Singapore - IDOR in campaign.starbucks.com.sg

17 Mar 2020 timeline

Starbucks disclosed a bug submitted by k3mlol
China - president-starbucks.com.cn DNS configuration reported as takeover

17 Mar 2020 timeline

Starbucks disclosed a bug submitted by e4366eolywrgpidfbio
Minimal information disclosure of internal asset names and links which were not publicly accessible.

17 Mar 2020 timeline

1 ... 3 4 5 6 7 ... 419

BY DENIS WERNER - @NOBBD - IMPRESSUM

the unofficial HackerOne disclosure timeline.